$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft File: mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft (raw, json) Hash identifier: NPm4zv7CYEAm8bvrtPD2L1z36fwpNHD5Qug4AucW5d8= Subject key identifier: 40:3B:0E:EC:A4:7D:A0:88:DA:62:4D:42:9E:9D:62:0D:54:1B:9B:20 Authority key identifier: 98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90 Certificate issuer: /CN=A91B0B89/serialNumber=986120E19431E2C3FE996503BE70072213549790 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft Manifest number: 0A Signing time: Thu 21 May 2026 09:18:05 +0000 Manifest this update: Thu 21 May 2026 09:18:05 +0000 Manifest next update: Thu 28 May 2026 09:18:05 +0000 Files and hashes: 1: mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl (hash: 3eKoHI1RvFjszRIuuEnnraaHQZ1gh3mS0cpPZZNbdwY=) 2: 45776578492911F19166D80CA6833773.roa (hash: CE8GzORY1KhTBpgJKwSkDL4jBuBSGsmu4XVI6wUnlcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 09:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0B89, serialNumber=986120E19431E2C3FE996503BE70072213549790 Validity Not Before: May 21 09:18:05 2026 GMT Not After : May 28 09:18:05 2026 GMT Subject: CN=6a0ecdcd-c46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:b6:41:4d:fe:03:19:31:dc:0b:4b:a4:d6: c6:18:00:c3:ac:64:fd:25:13:ea:60:83:40:aa:39: 76:70:c5:72:5c:60:28:ba:ef:46:38:ba:62:39:58: d5:5e:28:63:c2:f6:c1:7b:e7:b2:8d:f4:a6:4a:6b: f2:2f:37:f7:e8:77:de:ff:ab:85:e0:aa:0c:55:71: e0:7e:9e:f5:9c:e4:7b:d3:ec:55:ff:cb:de:a0:5c: af:f7:ba:f5:a0:f1:14:c7:d4:35:c9:4b:0f:93:da: ac:8e:37:24:53:98:43:d7:eb:cb:69:98:26:d8:ab: c7:58:de:62:c0:4e:fc:f0:4e:a8:f6:d6:5f:d2:10: ea:75:07:2f:bf:92:6f:2d:b1:08:70:1e:85:4f:4d: 54:cf:e5:f8:56:a6:e1:a5:64:49:10:33:38:e1:99: 96:d6:d4:5f:e7:d9:2e:6c:70:c2:41:69:46:2e:4e: 9c:7a:06:20:56:0c:68:39:cb:91:a6:fd:74:83:62: c8:c8:87:59:19:08:f7:64:84:42:b6:2c:1e:d1:14: 1b:98:fb:de:bd:02:54:54:3e:87:1c:83:30:f9:83: c5:88:a8:64:ea:9e:b4:7a:93:b3:97:10:88:61:50: b3:09:d5:31:8f:4e:54:30:0b:1d:5a:cc:a9:2d:3f: 11:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3B:0E:EC:A4:7D:A0:88:DA:62:4D:42:9E:9D:62:0D:54:1B:9B:20 X509v3 Authority Key Identifier: keyid:98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:91:8f:1d:07:51:ee:c1:5b:27:12:64:bf:79:3b:6e:86:28: 2a:90:b5:71:9e:eb:5c:ff:fd:dd:90:a5:57:a2:22:78:af:6d: 8c:1e:3a:5c:fd:1b:a2:14:b8:0b:fd:36:e6:10:50:45:b4:40: 4e:bd:fd:d6:5c:2d:68:63:a9:28:a2:a3:bf:69:28:fc:0a:47: c8:7c:49:dc:a0:d3:b0:b3:a6:3a:d2:72:1d:bf:0d:2a:4d:f3: 3e:2e:f5:01:31:c1:96:c1:e8:24:bf:e6:01:b5:7a:b9:da:54: 9e:d0:7b:41:04:1f:8f:06:9f:79:00:ae:58:cf:62:bc:6e:b2: b6:4a:46:57:8c:ac:2b:7c:ff:b4:64:bf:b3:9f:cb:88:d2:d7: 32:20:ca:ee:c4:94:f0:e8:68:c6:1d:d7:d1:c9:4a:65:70:d7: d5:b2:37:93:9f:1b:ed:ae:48:72:b5:1b:40:9f:6c:25:ba:61: c4:4a:d8:f2:2d:db:37:4b:2f:60:32:94:ac:ec:4e:6f:2f:9e: dd:de:9d:d3:ae:a3:6f:c5:61:8d:7c:cd:78:8c:e1:1a:fc:6b: ab:70:94:da:e8:59:29:2b:6c:a3:48:30:08:61:88:ae:2f:fc: 94:6e:23:ba:60:23:df:32:b0:04:79:03:4a:63:8a:6d:dd:5c: b0:40:72:d7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MEI4OTExMC8GA1UEBRMoOTg2MTIwRTE5NDMxRTJDM0ZFOTk2NTAzQkU3MDA3MjIx MzU0OTc5MDAeFw0yNjA1MjEwOTE4MDVaFw0yNjA1MjgwOTE4MDVaMBgxFjAUBgNV BAMTDTZhMGVjZGNkLWM0NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFw7ZBTf4DGTHcC0uk1sYYAMOsZP0lE+pgg0CqOXZwxXJcYCi670Y4umI5WNVe KGPC9sF757KN9KZKa/IvN/fod97/q4XgqgxVceB+nvWc5HvT7FX/y96gXK/3uvWg 8RTH1DXJSw+T2qyONyRTmEPX68tpmCbYq8dY3mLATvzwTqj21l/SEOp1By+/km8t sQhwHoVPTVTP5fhWpuGlZEkQMzjhmZbW1F/n2S5scMJBaUYuTpx6BiBWDGg5y5Gm /XSDYsjIh1kZCPdkhEK2LB7RFBuY+969AlRUPoccgzD5g8WIqGTqnrR6k7OXEIhh ULMJ1TGPTlQwCx1azKktPxGlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQDsO7KR9 oIjaYk1Cnp1iDVQbmyAwHwYDVR0jBBgwFoAUmGEg4ZQx4sP+mWUDvnAHIhNUl5Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwQjg5L0YyQjA5N0JBNDky ODExRjE4NDc0NThGNkE1ODMzNzczL21HRWc0WlF4NHNQLW1XVUR2bkFISWhOVWw1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbUdFZzRaUXg0c1AtbVdVRHZuQUhJaE5VbDVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw Qjg5L0YyQjA5N0JBNDkyODExRjE4NDc0NThGNkE1ODMzNzczL21HRWc0WlF4NHNQ LW1XVUR2bkFISWhOVWw1QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCskY8dB1HuwVsnEmS/eTtuhigqkLVxnutc//3dkKVXoiJ4r22MHjpc/RuiFLgL /TbmEFBFtEBOvf3WXC1oY6kooqO/aSj8CkfIfEncoNOws6Y60nIdvw0qTfM+LvUB McGWwegkv+YBtXq52lSe0HtBBB+PBp95AK5Yz2K8brK2SkZXjKwrfP+0ZL+zn8uI 0tcyIMruxJTw6GjGHdfRyUplcNfVsjeTnxvtrkhytRtAn2wlumHEStjyLds3Sy9g MpSs7E5vL57d3p3TrqNvxWGNfM14jOEa/GurcJTa6FkpK2yjSDAIYYiuL/yUbiO6 YCPfMrAEeQNKY4pt3VywQHLX -----END CERTIFICATE-----Generated at Thu May 21 12:23:28 2026 by rpki-client